F-35 Stealth Fighter Data Stolen in Australia Defence Hack

Sensitive data about Australia’s F- 35 stealth fighter and P-8 surveillance aircraft programmes were stolen when a defense subcontractor was hacked using a tool widely used by Chinese cybercriminals, officials said on Thursday. The Hackers used a tool called “China Chopper” which according to security experts is widely used by the Chinese actors, and had gained access via an internet-facing server, he said.

The 50-person aerospace engineering firm was compromised in July last year but the national cybersecurity agency, the Australian Signals Directorate (ASD), only became aware of the breach in November, technology website ZDNet Australia, reported.

Some 30GB of “sensitive data” subjected to restricted access under the US government’s International Traffic in Arms Regulations rules were stolen, ASD’s Mitchell Clarke told a security conference on Wednesday according to ZDNet.

Mr. Clarke, who worked on the case and did not name the subcontractor, said information about the F-35, the US’ latest generation of fighter jets, as well as the P8, an advanced submarine hunter and surveillance craft, were lifted.

Another document was a wireframe diagram of one of the Australian Navy's new ships, where a viewer could “zoom in down to the captain’s chair”.

The hackers used a tool called "China Chopper” which according to security experts is widely used by Chinese actors, and had gained access via an internet-facing server, he said.

In other parts of the network, the subcontractor also used internet-facing services that still had their default passwords “admin” and “guest”.

Those brought in to assess the attack nicknamed the hacker Alf after a character on the popular Australian soap.

“Home and Away”, Mr. Clarke said.

The three month period where they were unaware of the breach they dubbed “Alf’s Mystery Happy Fun Time”.

“It is not classified and it is not dangerous in terms of the military,” he said.

Mr. Pyne added that Australia was increasingly a target for cybercriminals as it was undertaking a massive 50 billion Australian dollar ($39 billion) submarine project which he described as the world’s largest.

The nation has also committed to buying 72 F-35A aircraft for 17 billion dollars.

He would not comment who might be behind the breach, only stating that the government was spending billions of dollars on cybersecurity.

Last year, the government’s Cyber Security Centre revealed that foreign spies installed malicious software on the Bureau of Meteorology’s system and stole an unknown number of documents.